<?php
  require_once('config.php');
  $dsn  = 'Driver='    . DB_DRIVER;
  $dsn .= ';Server='   . DB_HOST;
  $dsn .= ';Port='     . DB_PORT;
  $dsn .= ';Database=' . DB_DATABASE;
  $db_conn = odbc_connect("$dsn",$_SERVER['PHP_AUTH_USER'],$_SERVER['PHP_AUTH_PW'],SQL_CUR_USE_ODBC);
if(isset($_GET['sigid']) && isset($_GET['top']) && isset($_GET['from']) && isset($_GET['to'])){
	$sigid = $_GET['sigid'];
	$top = $_GET['top'];
	$from = date("Y-m-d", strtotime($_GET['from']));
	$to = date("Y-m-d", strtotime($_GET['to']));

//	$from = $_GET['from'];
//	$to = $_GET['to'];

	switch ($sigid){
	  case 'all':
	  $filename= "all_sig_".date("Y-m-d",strtotime($from)).".txt";
	    $query = "select * from mis.get_report_zero_false_positive('$from','$to',$top) as (\"Guid\" character(32), \"SigId\" integer, \"SampleSha1\" character(40),
		\"FilePath\" character varying(1000), \"IsHidden\" boolean, 
		\"CallerTypeId\" integer, \"IsSigned\" boolean,\"CursePoints\" integer,\"CAV_Heur_Name\" character varying(40),
		\"CAV_Heur_Level\" character varying(40),\"RPDTC_Verdict\" character varying(40),\"LastSectionEntropy\" real, 
		\"LastSectionAttributes\" integer,\"EpSectionEntropy\" real, \"EpSectionAttributes\" integer, 
		\"Peid_Entropy\" real, \"Peid_Packer\" character varying(100), \"AddedTs\" timestamp without time zone)";
	  break;
	  default:
	  $filename= $sigid."_".date("Y_m_d",strtotime($to)).".txt";
	    $query = "select * from mis.get_report_zero_false_positive('$from','$to',$top,$sigid) as (\"Guid\" character(32), \"SigId\" integer, \"SampleSha1\" character(40),
		\"FilePath\" character varying(1000), \"IsHidden\" boolean, 
		\"CallerTypeId\" integer, \"IsSigned\" boolean,\"CursePoints\" integer,\"CAV_Heur_Name\" character varying(40),
		\"CAV_Heur_Level\" character varying(40),\"RPDTC_Verdict\" character varying(40),\"LastSectionEntropy\" real, 
		\"LastSectionAttributes\" integer,\"EpSectionEntropy\" real, \"EpSectionAttributes\" integer, 
		\"Peid_Entropy\" real, \"Peid_Packer\" character varying(100), \"AddedTs\" timestamp without time zone)";
	  break;
	}
	    header('Content-Description: File Transfer');
	    header('Content-Type: application/octet-stream');
	    header('Content-Disposition: attachment; filename='.$filename);
	    header('Content-Transfer-Encoding: binary');
	    header('Expires: 0');
	    header('Cache-Control: must-revalidate, post-check=0, pre-check=0');
	    header('Pragma: public');

	    ob_clean();
	    flush();
	$res = odbc_exec($db_conn,$query);
	print "GUID;Sign ID;SHA1;File Name;File Path;IsHidden;CallerTypeID;IsSigned;CursePoint;CAV Heur Name;CAV Heur Level;RPDTC Verdict;Last Section Entropy;Last Section Attributes;EP Section Entropy;EP Section Attributes
				;Peid Entropy;Peid Packer;IsPathFromProgramFiles;IsPathFromStandardWindowsFolders;IsNonStandardPath;IsPacked\r\n";
	while(odbc_fetch_row($res)){
			print odbc_result($res,"Guid").";";
			print odbc_result($res,"SigId").";";
			print odbc_result($res,"SampleSha1").";";
			if(odbc_result($res,"FilePath")){$fname = explode("\\",odbc_result($res,"FilePath"));
			print $fname[count($fname)-1].";";}
			else {print "".";";}
			print odbc_result($res,"FilePath").";";
			if(odbc_result($res,"IsHidden")==1){print 'true'.";";}
			else{print 'false'.";";}
			print odbc_result($res,"CallerTypeId").";";
			if(odbc_result($res,"IsSigned")==1){print 'true'.";";}
			else{print 'false'.";";}
			print odbc_result($res,"CursePoints").";";
			print odbc_result($res,"CAV_Heur_Name").";";
			print odbc_result($res,"CAV_Heur_Level").";";
			print odbc_result($res,"RPDTC_Verdict").";";
			print odbc_result($res,"LastSectionEntropy").";";
			print odbc_result($res,"LastSectionAttributes").";";
			print odbc_result($res,"EpSectionEntropy").";";
			print odbc_result($res,"EpSectionAttributes").";";
			print odbc_result($res,"Peid_Entropy").";";
			print odbc_result($res,"Peid_Packer").";";
			if(preg_match("/program files/i",odbc_result($res,"FilePath")) ||preg_match("/program files (x86)/i",odbc_result($res,"FilePath")))
			{$prog= 'true';}
			else{$prog = 'false';}
			print $prog.";";
			if(preg_match("/windows/i",odbc_result($res,"FilePath"))){$win= 'true';}
			else{$win = 'false';}
			print $win.";";
			if ($prog =='false' || $win == 'false'){$nostand = 'true';}
			else{$nostand = 'false';}
			print $nostand.";";
			if(odbc_result($res,"Peid_Entropy")>=7){
			print 'true'."\r\n";}
			else{print 'false'."\r\n";}

	}
}
?>